cve.nowby Sazabi

CVEs published May 28, 2015

13 CVEs were published on May 28, 2015: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 13
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 13
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 13

CVE-2014-6628Aruba Networks ClearPass Policy Manager (CPPM) before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors.UnratedMay 28, 2015
CVE-2015-1389Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote attackers to inject…UnratedMay 28, 2015
CVE-2015-1392Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to…UnratedMay 28, 2015
CVE-2015-1550Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote administrators to execute…UnratedMay 28, 2015
CVE-2015-1551Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.4 allows remote administrators to read…UnratedMay 28, 2015
CVE-2015-3165Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before…UnratedMay 28, 2015
CVE-2015-4084Cross-site scripting (XSS) vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject arbitrary web…UnratedMay 28, 2015
CVE-2015-4127Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary…UnratedMay 28, 2015
CVE-2015-4132Multiple cross-site scripting (XSS) vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote…UnratedMay 28, 2015
CVE-2015-4133Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress…UnratedMay 28, 2015
CVE-2015-4134Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct…UnratedMay 28, 2015
CVE-2015-4135Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the…UnratedMay 28, 2015
CVE-2015-1157CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted…UnratedMay 28, 2015